“High-power power plants and storage management systems must be secure and resistant to cyber threats to avoid endangering the entire electricity system and becoming a cause of critical-scale power supply disruptions.
Read more Met with the German ruling representative, Gitanas Nausėda discussed bilateral relations and defense
That is why the law requires owners of such devices to ensure cybersecurity, implement necessary measures, and submit a cybersecurity declaration. The transition period ends on May 31, so we urge clients who have not yet submitted declarations not to delay – to conduct audits, organize documents, and leave time for possible corrections if needed,” says Rasa Juodkienė, ESO public relations representative.
According to the Electricity Energy Law, security compliance declarations must be submitted for electricity generation and/or energy storage devices with an installed capacity greater than 100 kW.
According to ESO data, nearly 400 facilities have currently submitted declarations. The requirement to submit security compliance declarations is mostly relevant to business clients, as private producing consumers’ power plants are usually of smaller capacity.
Read more Bacon Donuts: Congress supports the Baltic countries
What needs to be done?
By May 31, 2026, owners of devices with a capacity greater than 100 kW must:
- conduct a cybersecurity audit;
- fill out a security compliance declaration;
- implement necessary measures;
- submit the audit conclusion and declaration to ESO.
The audit can only be performed by certified cybersecurity specialists.
Instructions on how to correctly fill out the declaration, a template, and other related information can be found on the ESO website.
Why is this important?
Cybersecurity requirements were established to protect energy infrastructure from potential cyber threats. This ensures that these systems are not vulnerable or remotely controlled by countries that pose a threat according to Lithuania’s national security strategy.
Ensuring cybersecurity has become especially important with the growing number of renewable energy production devices and storage systems, as more and more elements of the electricity system become dependent on remote control and digital solutions.
